Bradley Girardeau
7b6547abf7
Clean up naming and add documentation
2015-07-30 17:36:40 -07:00
Bradley Girardeau
c7b806ebf6
mfa: code cleanup
2015-07-28 11:55:46 -07:00
Bradley Girardeau
083226f317
mfa: improve edge cases and documentation
2015-07-27 21:14:00 -07:00
Bradley Girardeau
0efdcb7ae0
mfa duo: better error messages
2015-07-27 21:14:00 -07:00
Bradley Girardeau
4b87af123d
mfa: add test cases for MFA, Duo
2015-07-27 21:14:00 -07:00
Bradley Girardeau
b581bf20e0
mfa: add MFA wrapper with Duo second factor
2015-07-27 21:14:00 -07:00
Armon Dadgar
edb60b5832
helper/kdf: changing argument name for clarity
2015-07-05 14:01:56 -07:00
Armon Dadgar
8d0840fb82
helper/kdf: adding lib for key derivation from NIST800-108
2015-07-05 14:01:21 -07:00
Armon Dadgar
f975cc6e2b
helper/salt: track if salt was generated
2015-06-30 16:47:49 -07:00
Armon Dadgar
74714e1122
helper/salt: adding little helper for salting
2015-06-30 14:04:18 -07:00
Armon Dadgar
e9f05fbe4f
helper/uuid: single generateUUID definition
2015-06-30 12:38:32 -07:00
Armon Dadgar
01592c0744
Merge pull request #310 from jefferai/f-pki
...
Initial PKI backend implementation
2015-06-21 11:12:22 +01:00
Steve Wills
fce09c2962
allow building on FreeBSD
...
Allow this file to build on FreeBSD
2015-06-19 16:59:24 -04:00
Jeff Mitchell
15594561ab
Add unit tests for certutil, and fix a whitespace stripping issue.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com >
2015-06-19 16:06:56 -04:00
Jeff Mitchell
435aefc072
A few things:
...
* Add comments to every non-obvious (e.g. not basic read/write handler type) function
* Remove revoked/ endpoint, at least for now
* Add configurable CRL lifetime
* Cleanup
* Address some comments from code review
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com >
2015-06-19 12:48:18 -04:00
Jeff Mitchell
23ba605068
Refactor to allow only issuing CAs to be set and not have things blow up. This is useful/important for e.g. the Cassandra backend, where you may want to do TLS with a specific CA cert for server validation, but not actually do client authentication with a client cert.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com >
2015-06-18 15:22:58 -04:00
Jeff Mitchell
c4256601f2
Restructure a little bit to make the helper library fully standalone. This makes it easier to move around later if desired, and for use by external programs.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com >
2015-06-18 06:42:57 -04:00
Jeff Mitchell
31e680048e
A lot of refactoring: move PEM bundle parsing into helper/certutil, so that it is usable by other backends that want to use it to get the necessary data for TLS auth.
...
Also, enhance the raw cert bundle => parsed cert bundle to make it more useful and perform more validation checks.
More refactoring could be done within the PKI backend itself, but that can wait.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com >
2015-06-17 16:07:20 -04:00
Mitchell Hashimoto
4502bb71b8
helper/kv-builder: blank values should not panic
2015-06-16 10:00:02 -07:00
Mark Junker
94adbb3d49
Fixes #83
2015-04-29 10:20:09 +02:00
Mitchell Hashimoto
04215756ea
vault: add helper/mlock for doing mlock
2015-04-28 14:59:43 -07:00
Mitchell Hashimoto
ae1c71085c
helper/passsword: fix windows compilation
2015-04-28 09:23:48 -07:00
Mitchell Hashimoto
574050b53f
helper/kv-builder
2015-04-07 22:30:25 -07:00
Mitchell Hashimoto
3e4a8a926e
command/auth: framework for supporting more auth methods
2015-04-05 20:50:18 -07:00
Mitchell Hashimoto
a196d194a1
command/server: cleaner output
2015-04-04 12:06:41 -07:00
Mitchell Hashimoto
1e7a94f6ba
helper/password: catch ctrl-c if possible
2015-04-01 17:27:29 -07:00
Mitchell Hashimoto
12566c645c
logical/framework, logical/testing
2015-03-15 16:39:49 -07:00
Mitchell Hashimoto
0496a0837a
helper/backend: use logical package
2015-03-15 14:57:19 -07:00
Mitchell Hashimoto
5e804c26e9
helper/backend: start acceptance test framework
2015-03-14 17:18:19 -07:00
Mitchell Hashimoto
8ecbb9d2d1
helper/backend: auto-generate help route
2015-03-14 10:12:50 -07:00
Mitchell Hashimoto
0890ece955
helper/backend: one callback per operation
2015-03-14 00:19:25 -07:00
Mitchell Hashimoto
24f7ddfd8c
helper/backend: HandleRequest works
2015-03-13 23:58:20 -07:00
Mitchell Hashimoto
da2c1d4896
helper/backend: store captures for a path
2015-03-13 23:48:49 -07:00
Mitchell Hashimoto
f19c63de4a
helper/backend: cache route regexps (98% speedup)
...
benchmark old ns/op new ns/op delta
BenchmarkBackendRoute 49144 589 -98.80%
2015-03-13 23:25:17 -07:00
Mitchell Hashimoto
9e7add90b2
helper/backend: benchmark route
2015-03-13 23:22:48 -07:00
Mitchell Hashimoto
f5893adb8a
helper/backend: basic path routing (naive)
2015-03-13 23:17:25 -07:00
Mitchell Hashimoto
6575c9355b
helper/backend: add default values
2015-03-13 21:15:20 -07:00
Mitchell Hashimoto
d39b117281
helper/backend: start this thing
2015-03-13 21:11:19 -07:00
Mitchell Hashimoto
2bbd5fa66e
command/server: add config loading
2015-03-12 15:21:11 -07:00
Mitchell Hashimoto
205857be65
helper/password: for reading passwords securely
2015-03-04 00:31:35 -08:00